Lucene search

[email protected]CVE-2003-1107

HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1107

2003-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

microsoft

windows media player

wmp

dhtml

security

bypass

access restrictions

cve-2003-1107

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.5%

JSON

The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a security zone that is less trusted than the current zone, which allows attackers to bypass intended access restrictions.

CPENameOperatorVersion
microsoft:windows_media_playermicrosoft windows media playereq7
microsoft:windows_media_playermicrosoft windows media playereq7.1
microsoft:windows_media_playermicrosoft windows media playereq6.4
microsoft:windows_media_playermicrosoft windows media playereq9

CPE	Name	Operator	Version
microsoft:windows_media_player	microsoft windows media player	eq	7
microsoft:windows_media_player	microsoft windows media player	eq	7.1
microsoft:windows_media_player	microsoft windows media player	eq	6.4
microsoft:windows_media_player	microsoft windows media player	eq	9

References

support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B828026

www.kb.cert.org/vuls/id/222044

exchange.xforce.ibmcloud.com/vulnerabilities/13375

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.5%

JSON